Hacker News Reader

atom7on Nginx 1.6.0 stable released

but "In general, you should deploy the NGINX mainline branch at all times." @ http://nginx.com/blog/nginx-1-6-1-7-released/

atom7on Nginx 1.6.0 stable released

It hasn't. "This PPA is maintained by volunteers and is not distributed by nginx.org."

atom7on Can You Get Private SSL Keys Using Heartbleed?

".. stealing private keys on most NGINX servers is at least extremely hard and, likely, impossible .."

Nice!

atom7on Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11)

It's a common practice to use two pointers when parsing some stream data buffer. If you will use a pointer to the start of the buffer and the size of an available data to parse, then you would need to change two variables instead of one on every parsing stage. So you have more opportunity to make a mistake.

atom7on Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11)

btw, I use packages from nginx.org, they're updated in time with every release: http://nginx.org/en/linux_packages.html

atom7on Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11)

It's not affected on Debian/Ubuntu, check --with-debug flag.

atom7on Nginx SPDY heap buffer overflow (affects 1.3.15 – 1.5.11)

I assume the reason was to keep diff as minimal as possible. Note that it should apply to all mentioned versions without problems.